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(54) System and method for enabling fault tolerant H.323 systems 

(57) An H.323 client terminal (102) according to an 
embodiment of the invention employs primary and sec- 
ondary H.323 control units or state machines (110a, 
1 10b). The primary control unit (1 10a) sends signaling 
messages to a primary gatekeeper (108a) and triggers 
the secondary control unit (110b) to send a message 
with an appropriate correlation identifier to a secondary 
gatekeeper (108b). The primary control unit (110a) 
establishes a call per standard H.323 protocols. The 
secondary control unit (1 10b) also establishes a call via 
a secondary gatekeeper (108b). However, no media 
channels are established for this back up call. As the 
secondary control unit (110b) receives signaling from 
the secondary gatekeeper (108b), it checks the status 
of the call with the primary control unit (1 10a). If the call 
signaling on the primary control unit (1 10a) is proceed- 
ing normally, no further action is taken. If the call signal- 
ing with the primary gatekeeper (108a) fails, the 
secondary control unit (110b) takes over communica- 
tion. 
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Description 

BACKGROUND OF THE INVENTION 

FIELD OF THE INVENTION 

[0001] The present invention relates to telecommu- 
nications systems and, particularly, to an improved fault 
tolerant H.323 system. 

DESCRIPTION OF THE RELATED ART 

[0002] The International Telecommunications 
Union (ITU) Recommendation H.323 describes a set of 
devices and protocols for multimedia communication 
over packet-switched networks. The four main compo- 
nents defined by the specification are clients (also 
referred to as terminals or endpoints), multipoint control 
units, gateways and gatekeepers. 
[0003] The H.323 Recommendation provides for 
separate H.225.0 call signaling, H.245 call control and 
media channels. Typically, H.225.0 call signaling and 
H.245 call control are routed through the gatekeeper, 
while the media channels (i.e., audio, data and/or video) 
are routed directly between the endpoints. For example, 
to place a call between two clients, the calling party cli- 
ent sends a message to a gatekeeper, which resolves 
the address of the receiving party and sends the appro- 
priate signaling messages to the caller and receiver. 
Once the signaling and control channels have been 
established, the endpoints establish the media chan- 
nels. There may be more than one media channel for a 
call, such as two unidrectional channels for an audio 
call. The H.225.0 signaling channel and the H.245 call 
control channel are also used to terminate the call. 
[0004] If the gatekeeper fails for any reason, the 
endpoints become aware of the situation because their 
connection to the gatekeeper (usually seen in the client 
as a TCP socket) will close. When the H.245 control 
channel is detected as having been closed, the H.323 
Recommendation requires the endpoints to disconnect 
the call and close the media channel(s). This require- 
ment exists so that when the gatekeeper does recover, 
there are no outstanding media connections still alive of 
which the gatekeeper is unaware. Thus, the network is 
prevented from perpetually maintaining a call. When a 
bandwidth policy is employed, the network is prevented 
from allowing more calls than the network can handle. 
[0005] While redundant back-up gatekeepers which 
track other gatekeepers' operations have been known to 
be provided, such systems do not allow for preservation 
of ongoing calls. In these cases, ongoing calls are lost 
and the H.323 client terminals must re-register and re- 
initiate call setup again, which can cause a burst of 
excessive load on the network and on the gatekeeper. 
Moreover, gatekeeper to gatekeeper communication 
can consume processing power and load the system. 
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SUMMARY OF THE INVENTION 

[0006] These disadvantages in the prior art are 
overcome in large part by a system and method accord- 
5 ing to the present invention. In particular, H.323 client 
terminals according to the present invention include 
redundancy supervisory layers which provide redun- 
dant H.225.0 call signaling and H.245 call control to 
secondary gatekeepers. The secondary gatekeepers 
10 respond as if they were the primary gatekeeper, but the 
H.323 client terminals do not set up media channels as 
part of the call setup via the secondary gatekeepers. If 
the primary gatekeeper fails, the media channel(s) is 
maintained, and the redundancy supervisory layers 
15 know that the call signaling and call control channels 
are to be handled through the secondary gatekeeper. 
[0007] An H.323 client terminal according to an 
embodiment of the invention employs primary and sec- 
ondary H.323 control units or state machines. The 
H.323 client terminal registers with both a primary and a 
secondary gatekeeper. The primary control unit sends 
signaling messages to a primary gatekeeper and trig- 
gers the secondary control unit to send messages with 
the appropriate call identifier to a secondary gate- 
keeper. The primary control unit establishes a call per 
standard H.323 protocols. As the secondary control unit 
receives signaling from the secondary gatekeeper, the 
secondary control unit checks the status of the call with 
the primary control unit. If the call signaling on the pri- 
mary control unit is active, no further action is taken by 
the secondary control unit once the secondary call is 
established. If the call signaling with the primary gate- 
keeper fails, the secondary control unit takes over com- 
munication. 

[0008] A better understanding of the invention is 
obtained when the following detailed description is con- 
sidered in conjunction with the following drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0009] 

FIG. 1 is a diagram illustrating an H.323 system 
according to an embodiment of the invention; 
FIGS. 2A-2C are diagrams illustrating an H.323 ter- 
minal with a redundancy supervisory layer accord- 
ing to ah embodiment of the invention; 
FIG. 3 is a diagram illustrating signaling flow 
according to an embodiment of the invention; 
FIGS. 4A-4C are flowcharts illustrating system 
operation according to an embodiment of the inven- 
tion; 

FIG. 5 is a diagram , illustrating signaling flow 
according to another embodiment of the invention; 
and 

FIGS. 6A-6C are flowcharts illustrating system 
operation according to the embodiment of FIG. 5. 
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DETAILED DESCRIPTION OF THE INVENTION 

[001 0] Turning now to the drawings, and with partic- 
ular attention to FIG. 1 , a diagram illustrating an exem- 
plary H.323 telecommunications system 100 according 
to an embodiment of the present invention is shown. It is 
noted that, while described herein with regard to an 
H.323 network, the invention is equally applicable to any 
network in which separate media and signaling chan- 
nels are used, such as MGCP (Media Gateway Control 
Protocol), SIP+ (Inter MGS Protocol), SGCP, MEGACO, 
and generally, any voice or multimedia over IP scheme. 
Further, it is noted that, while described specifically in 
the context of voice packets, the present invention 
encompasses the use of any multimedia information, 
such as video, data, voice, or any combinations thereof. 
Finally, it is noted that an exemplary H.323 system is the 
HiNet™ RC 3000 system, available from Siemens. 
[0011] The telecommunications system 100 
includes a local area network (LAN) or packet network 
1 01 . Coupled to the LAN 1 01 may be a variety of H.323 
terminals 102a, 102b, a multi-point control unit (MCU) 
104, an H.323 gateway 106, a primary H.323 gate- 
keeper 108a, a secondary H.323 gatekeeper 108b, a 
LAN server 1 12, a bandwidth allocation server 1 1 3 and 
a plurality of other devices such as personal computers 
(not shown). The H.323 terminals 102a, 102b are in 
compliance with the H.323 Recommendation. Thus, the 
H.323 terminals 102a, 102b support H.245 control sign- 
aling for- negotiation of media channel usage, Q.931 
(H.225.0) for call signaling and call setup, H.225.0 Reg- 
istration, Admission and Status (RAS), and RTP/RTCP 
for sequencing audio and video packets. The H.323 ter- 
minals 102a, 102b may further implement audio and 
video codecs, T.120 data conferencing protocols and 
MCU capabilities. Further details concerning the H.323 
Recommendation may be obtained from the Interna- 
tional Telecommunications Union; the H.323 Recom- 
mendation is hereby incorporated by reference in its 
entirety as if fully set forth herein. 
[0012] Further, the H.323 terminals 102a, 102b 
include redundancy control units (also referred to as 
"redundancy supervisory layers") 111a, 111b, each of 
which includes a primary and secondary control unit 
110a, 110b and 110c, 110d, respectively (typically 
embodied as coupled state machines), according to the 
present invention. The redundancy control units 111a, 
1 1 1b function to provide H.323 signaling to the primary 
and secondary gatekeepers, 108a and 108b, respec- 
tively. The redundancy control units .1 1 1 a, 1 1 1 b and the 
primary and secondary gatekeepers 108a, 108b func- 
tion to provide a system with two signaling channels but 
a single media or payload channel(s) allocated only for 
the primary connection, as will be discussed in greater 
detail below. 

[0013] In addition, a bandwidth allocation server or 
manager 113 may be provided, including a redundant 
allocation layer 115 according to the invention. As will 



be discussed in greater detail below, the redundant allo- 
cation layer 1 1 5 associates system bandwidth across 
two calls when primary and secondary signaling and 
control paths are established according to the present 

5 invention. Other servers, such as billing servers, which 
are not specifically described, may operate in a similar 
manner (e.g., to prevent duplication of services such as 
charges based on the dual signaling). 
[001 4] In accordance with a specific embodiment of 

w the present invention, FIG. 2A illustrates a logical dia- 
gram of an H.323 interface to the LAN 101. It is noted 
that, while illustrated in network layer format, typically, 
the redundancy supervisory layer 1 1 1 is implemented 
as one or more coupled state machines capable of sup- 

15 porting the H.323 protocol. The interface includes a net- 
work terminal/device 102 including a, redundancy 
supervisory layer 1 1 1 according to the present invention 
and a packet network interface 1 3 that is coupled to the 
network terminal 102. As will be discussed in greater 

20 detail below, the network terminal 1 02 utilizes the ITU-T 
H.323 Recommendation protocol. The network inter- 
face 1 3 couples the network terminal 1 02 to the LAN 
101. H.323 terminals/devices and equipment carry real- 
time voice, video and/or data. It should be noted that 

25 H.323 recommendation is an umbrella recommendation 
that provides for multimedia communications, including 
telephony-over-LAN communications. The network can 
include packet-switched Transmission Control Proto- 
col/Internet Protocol (TCP/IP) and Internet Packet 

30 Exchange (IPX) over Ethernet, Fast Ethernet and Token 
Ring networks. 

[0015] The H.323 terminal 102 is coupled to a video 
input/output (I/O) interface 28, an audio I/O interface 
212, a data equipment interface 40, and a system con- 

35 trol user interface (SCUI) 20. The network terminal 102 
further includes an H.225.0 layer 24, an audio 
coder/decoder (codec) 14, and may include a video 
codec 1 5, and a T. 1 20 data interface layer 1 9. The audio 
I/O interface or card 212, which may be part of the 

40 standard H.323 device, connects to the audio codec 1 4, 
such as a G.711 codec, for encoding and decoding 
audio signals. The audio codec 14 coupled to the 
H.225.0 layer 24 encodes audio signals for transmission 
and decodes received signals. Although the G.711 

45 codec is the mandatory audio codec for an H .323 termi- 
nal, other audio codecs, such as G.728, G.729, 

G. 723.1, G.722, and MPEG1 audio may also be used 
for encoding and decoding speech. G723.1 is a pre- 
ferred codec because of its reasonably low bit rate, 

50 which enables preservation of link bandwidth, particu- 
larly in slower speed network connections. 
[0016] The video I/O interface or card 28, which 
may be part of the standard H.323 device, connects to a 
video codec 15, such as an H.261 codec for encoding 

55 and decoding video signals. The video codec 15 
encodes video signals for transmission and decodes 
received signals. H.261 is the mandatory codec for 

H. 323 terminals that support video, though other 
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codecs such as H.263 may be supported. 
[0017] The system control user interface (SCUI) 20 
provides signaling and flow control for proper operation 
of the H.323 terminal 102. In particular, call signaling 
and control are handled by the SCUI 20. A redundancy 
supervisory layer 1 1 1 according to the present invention 
is coupled to the SCUI 20. The redundancy supervisory 
layer 1 1 1 according to the present invention includes a 
pair of control layers 11a, 11b, and an arbitration layer 
29. The control layers 1 1 a, 1 1 b are standard H.323 con- 
trol layers and thus include Q.931 layers 16a, 16b, 
H.225.0 RAS layers 17a, 17b, and H.245 layers 18a, 
18b. Thus, the SCUI 20 interfaces via the arbitration 
layer 29 to the H.245 layer 1 8 which is the media control 
protocol that allows capability exchange, opening and 
closing of logical channels, mode preference requests, 
flow control messages and other miscellaneous com- 
mands and indications. The SCUI 20 also interfaces via 
the arbitration layer 29 to the Q.931 protocol which 
defines the setup, teardown, and control of H.323 com- 
munication sessions. The SCUI 20 further interfaces via 
the arbitration layer 29 to the H.225.0 Registration, 
Admission and Status (RAS) protocol that defines how 
H.323 entities can access H.323 gatekeepers to per- 
form, among other things, address translation, thereby 
allowing H.323 endpoints to locate other H.323 end- 
points via an H.323 gatekeeper. The H.225.0 layer 24, 
which is derived from Q.931 layer 1 6a, 1 6b, is the proto- 
col for establishing a connection among two or more ter- 
minals and also formats the transmitted video, audio, 
data, signaling and control streams into messages for 
communication via the network interface 13 (e.g., 
packet network 101). The H.225.0 layer 24 also 
retrieves the received video, audio, data, signaling and 
control streams from messages that have been input 
from the network interface, routes the signaling and 
control information to the appropriate control layer 11a, 
1 1 b and routes media streams to the appropriate audio, 
video and data interfaces. 

[0018] Thus, an H.323 network may be configured 
to include several different devices. For example, the 
network may include a terminal for enabling a user con- 
nected to a LAN to communicate with another user on 
the LAN, a terminal for enabling a caller resident on the 
LAN to call a second party in the public switched net- 
work and/or a terminal for enabling an adapter to com- 
municate through a wireless trunk, using a wireless 
telephone. The device may also implement supplemen- 
tary services according to the H.450.X Recommenda- 
tions. 

[0019] The arbitration layer 29 according to the 
present invention provides a single signaling flow to the 
SCUI 20. If both control layers 1 1a, 1 1b are functioning, 
the arbitration layer 29 selects the primary control state 
machine or control layer. If either control layer 1 1 a, 1 1 b 
is down, because the related gatekeeper is down, the 
arbitration layer 29 selects the other operational state 
machine or control layer to control a call. This is illus- 
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trated schematically in FIGS. 2B and 2C. 
[0020] The arbitration layer 29 of FIG. 2B receives 
H.225.0 call signaling and H.245 control signaling along 
lines 33, 35 from the primary and secondary state 

5 machines SM1, SM2. The arbitration layer 29 further 
receives status signals along lines 37, 39 from the state 
machines SM1, SM2, indicative of whether they (and 
hence the gatekeepers from which they are receiving 
signaling) are up and functioning. Assuming both state 

w machines are active, the arbitration layer 29 selects to 
receive and transmit to the SCUI 20 the H.225.0 and 
H.245 signaling from the primary state machine SM1. It 
is noted that references to "primary" and "secondary" 
state machines or control layers is somewhat arbitrary; 

15 either state machine could be the primary one. 

[0021] FIG. 2C illustrates the situation in which the 
primary state machine SM1 has failed, because the 
gatekeeper from which it had been receiving signaling 
had failed. In this case, the arbitration layer 29 reads the 

20 status signal along line 37 and switches to receive 
H.225.0 and H.245 signaling from the state machine 
SM2, from which an active status signal had been 
received, along line 39. 

[0022] Furthermore, the terminal 1 02 shown in FIG. 

25 2A is capable of functioning in an environment in which 
only a few of the terminals are similarly equipped. That 
is, not all of the H.323 client endpoints need be 
equipped with redundancy supervisory layers 111 
including primary and secondary state machines. The 

30 availability of the redundancy supervisory layer 1 1 1 is 
determined during call set up. It is utilized only if both cli- 
ents are so equipped. If only one client is so equipped, 
the system defaults to a normal, non-redundant opera- 
tion, using state machine SM1 (11a). Thus, the present 

35 invention advantageously permits redundancy and fault 
tolerance to be assigned among only selected clients or 
groups of clients within a system. 
[0023] FIG. 3 illustrates the signaling for operation 
of an embodiment of the invention. It is noted that while 

40 the signal paths are shown as direct connections, typi- 
cally, signaling is conducted via the LAN. As shown, a 
pair of gatekeepers, GK 1 and GK 2, and a pair of client 
terminals or endpoints Client 1 and Client 2 are con- 
nected to the LAN 101. The endpoints Client 1 and Cli- 

45 ent 2 include redundancy supervisory layers 111a, 
111b, according to the present invention, as well as cli- 
ent applications 102a, 102b. It is noted that while the 
gatekeepers GK 1 and GK 2 may be identical, or may 
use the same operating system, in certain instances, it 

so may be preferable to use primary and secondary gate- 
keepers which employ different operating systems, or 
even come from different vendors, to prevent both gate- 
keepers from crashing simultaneously from a common 
software or condition fault. The present invention is 

55 capable of operating in such an environment, because 
the redundancy is maintained by the client terminals, 
not the gatekeepers themselves. 
[0024] If Client 1 initiates a call to Client 2, it sends 
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an H.225.0 Setup message, including a globally unique 
call identifier (GUId), to its primary gatekeeper GK 1 
along signaling path 302. The H.323 call setup also 
includes a capability exchange to allow the endpoints to 
determine that a redundancy supervisory layer is avail- 
able at both ends. 

[0025] In response to the received H.225.0 Setup 
message, the gatekeeper GK 1 sends an H.225.0 Setup 
message to the endpoint Client 2 along signaling path 
304. Client 2 responds along the signaling path 304 and 
the call is set up in the standard fashion. The media 
channel 310 is then established directly between the 
endpoints. Once the primary call is established, an 
H.225.0 Setup message is sent to the secondary gate- 
keeper GK 2 along signaling path 306. It is noted that 
the establishment of the secondary signaling path is ini- 
tiated only after the primary call is established and it has 
been allocated bandwidth for its media (payload) chan- 
nel(s). The gatekeeper GK 2 then sends an H.225.0 
Setup message to the endpoint Client 2 along signaling 
path 308. This occurs after the capability exchange of 
the first call setup has been completed and the end- 
points know that redundancy supervisory layers are 
available at both endpoints. The H.225.0 Setup mes- 
sage contains the same globally unique call identifier 
(GUId) as the first H.225.0 Setup message for the pri- 
mary call. Alternatively, the GUId's could be related 
according to a predetermined algorithm, such as 
sequentially, so long as the Client 2 can recognize the 
call set up being received as being redundant. The end- 
point Client 2 recognizes the GUId as identifying a 
backup signaling connection and accepts it. However, 
the endpoint Clients 1 and 2 will not open any logical 
media channels in response to this second call setup 
(i.e., a separate media payload channel will not be 
established). Due to the existence of the redundancy 
supervisory layers and their associated arbitration lay- 
ers 29, the Client Applications are presented with only a 
single signaling channel and a single stream of media 
(e.g., voice) packets. The Client Applications are not 
aware of whether the primary or secondary gatekeeper 
is being used to control signaling. 
[0026] If gatekeeper GK 1 (the primary gatekeeper) 
stays up during the entire call, when one of the users 
disconnects, the user's endpoint client sends a stand- 
ard clearing message to the gatekeepers GK 1 and GK 
2. The gatekeeper GK 1 terminates the call by sending 
clearing messages to the other endpoint client and clos- 
ing the signaling channel. The gatekeeper GK 2 sends 
the same clearing messages and the secondary signal- 
ing channels are also closed. The redundancy supervi- 
sory layer 111a, 111b in each endpoint performs the 
termination function (and any related features). The 
arbitration layer 29 passes the clearing information from 
the primary state machine or control layer to the Client 
Application via the SCUI 20. The arbitration layer 29 
ensures that the secondary state machine closes its 
signaling and control channels properly, as well. 



[0027] If the gatekeeper GK 1 fails during the call, 
its signaling channel (along paths 302, 304) between 
the endpoints Client 1 and Client 2 is lost. The failure of 
the gatekeeper GK 1 is recognized at the endpoints, for 

5 example, as a TCP socket closing. According to the 
present invention, the media or payload channel 310 is 
maintained and the secondary signaling channel 
through the gatekeeper GK 2 (along paths 306, 308) is 
used. While the gatekeeper GK 1 is out of service, any 

io of the gatekeeper's endpoints equipped with the redun- 
dancy supervisory layer 111 trying to use the gate- 
keeper GK 1 , will be switched to the gatekeeper GK 2 as 
the arbitration layers and the redundancy supervisory 
layers recognize the failure of the gatekeeper GK 1 . It is 

15 noted that more than two gatekeepers (and hence, 
more than two state machines or control layers within 
the redundancy supervisory layer 111) could be used. 
Thus, the figures are exemplary only. 
[0028] Operation of this embodiment of the inven- 

20 tion is illustrated more clearly with reference to the flow- 
charts of FIGS. 4A-4C. In particular, with reference to 
FIG. 4 A, in a step 402, the endpoint Client 1 wants to 
establish a call to another endpoint, Client 2. The end- 
point Client 1 and, particularly, the primary state 

25 machine or primary control unit 110a, sends an ARQ 
message (AdmissionRequest) to the gatekeeper GK 1 . 
Assuming the gatekeeper GK 1 is functioning, the gate- 
keeper GK 1 responds with an ACF (AdmissionConfirm) 
message to Client 1 , in a step 404, which is received by 

30 the primary state machine 110a. The ACF message 
includes a Call Signaling Transport Channel Address of 
the gatekeeper GK 1. In a step 406, in response to the 
ACF message, the primary state machine 110a sends 
an H.225.0 Setup message to the gatekeeper GK 1, 

35 including a Globally Unique Call Identifier to identify the 
call. 

[0029] In a step 408, the gatekeeper GK 1 relays 
the H.225.0 Setup message to the endpoint Client 2 
and, in particular, its primary state machine or primary 

40 control unit 110c. In response, in a step 410, the end- 
point Client 2's primary state machine 1 1 0c conducts an 
ARQ/ACF exchange with the gatekeeper GK 1. In a 
step 412, the endpoint Client 2's primary state machine 
1 1 0c sends an H.225.0 Alerting and Connect message 

45 to the gatekeeper GK 1 as the call progresses to the 
connect state. The gatekeeper GK 1, in turn provides 
the Alerting and Connect messages to the endpoint Cli- 
ent 1's primary state machine 1 10a in a step 414. The 
Alerting or Connect message includes the Gatekeeper 

50 H.245 Control Channel Transport Address, which is 
used, in a step 41 5, to establish the H.245 control chan- 
nel. Next, an H.245 capability exchange is undertaken, 
in a step 416. In a step 417 the media channel is 
opened between endpoint Client 1 and Client 2. The 

55 capability exchange includes exchanges of the coding 
algorithm to be used, and the like. In addition, according 
to the present invention, the capability exchange 
includes an exchange of whether or not each side is 
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equipped with a redundancy supervisory layer 1 1 1 , a 
determination which is made in a step 41 8. If one side is 
not equipped with a redundancy supervisory layer 111, 
then in a step 41 9 ,the system proceeds with normal call 
setup without redundancy, and the non-equipped side 
uses its only state machine as the "primary" state 
machine. In step 418, if it is established that both sides 
are equipped with a redundancy supervisory layer, then 
the primary state machine 1 10a sends a signal activat- 
ing the secondary state machine 11 Ob in a step 421 . 
[0030] In a step 424, the secondary state machine 
11 Ob sends an ARQ to the gatekeeper GK2, which 
requests no bandwidth for this secondary call. In a step 
426, the secondary state machine 110b receives an 
ACF message from the gatekeeper GK 2, including the 
Call Signal Transport Channel Address of the gate- 
keeper GK 2. In a step 428, the secondary state 
machine 1 10b sends an H.225.0 Setup message to the 
gatekeeper GK 2, using the same globally unique call 
identifier that the primary state machine 1 1 0a used pre- 
viously with the gatekeeper GK 1. In a step 430, the 
gatekeeper GK 2 sends the H.225.0 Setup message to 
the endpoint Client 2 using the same globally unique 
call identifier as was used on the primary call. The end- 
point Client 2 receives the H.225.0 Setup message and 
determines that it is related to an existing call (the call 
established in steps 402 through 41 7). This causes end- 
point Client 2's primary state machine 110c to send a 
signal activating the secondary state machine 110d to 
process the received H.225.0 Setup message. In 
response to the H.225.0 Setup message, in a step 432 
the endpoint Client 2's secondary state machine 110d 
and the gatekeeper GK 2 exchange ARQ/ACF mes- 
sages. In a step 434, the endpoint Client 2's secondary 
state machine 110d sends a Connect message to the 
gatekeeper GK 2. This Connect message is forwarded 
by the gatekeeper GK 2 to the endpoint Client 1 (and, in 
particular, its secondary state machine 110b) in a step 
436. Next, in a step 438, the secondary state machine 
1 1 0d of the endpoint Client 2 establishes the H.245 con- 
trol channel with the endpoint Client 1 . The endpoint Cli- 
ent 2's secondary state machine 110d recognizes the 
duplicate nature of the signaling and associates in step 
439 this signaling with the media channel that which 
had been established in step 417. 
[0031] Turning now to FIG. 4B, a flowchart illustrat- 
ing the termination process is shown. In a step 440, call 
termination is initiated at endpoint Client 1 . It is noted 
that the call termination could be initiated from the end 
point Client 2 as well. In a step 441 , the endpoint Client 
1 (and, in particular, the state machine 1 10a), for exam- 
ple, initiates call termination by sending an H.245 end- 
SessionCommand to gatekeeper GK 1 , which sends 
the H.245 endSessionCommand on to endpoint Client 
2. In a step 443, endpoint Client 2 (and, in particular, the 
state machine 110c) responds to the received H.245 
endSessionCommand by sending its own H.245 end 
SessionCommand to GK 1 , which sends the H.245 end- 



SessionCommand on to endpoint Client 1. In a step 
445, endpoint Client 1 sends an H.225.0 Release Com- 
plete message to gatekeeper GK 1 to close the call sig- 
naling channel, and GK 1 sends the Release Complete 

5 message on to endpoint Client 2. Endpoint Clients 1 
and 2 then inform gatekeeper GK 1 to release the band- 
width for the primary call by sending Disengage 
Request (DRQ) messages to GK 1 , in a step 447. In a 
step 448, gatekeeper GK 1 responds to the received 

to DRQ messages by sending endpoint Clients 1 and 2 
Disengage Confirm (DCF) messages. In a step 449, the 
redundancy supervisory layer 1 1 1 determines whether 
the GUId is recognized as belonging to an already 
closed connection. If so, then the operation of the pri- 

15 mary state machine terminates. If in a step 449 it is 
found that the media channel has not been closed, then 
in a step 460 the media connection is closed. 
[0032] Concurrently with closing the primary con- 
nection, the secondary connection also needs to be 

20 closed. In a step 451 , the endpoint Client 1 (and, in par- 
ticular, the state machine 1 10b) initiates call termination 
by sending an H.245 endSessionCommand to gate- 
keeper GK 2, which sends the H.245 endSessionCom- 
mand on to endpoint Client 2. In a step 453, endpoint 

25 Client 2 (and, in particular, the state machine 110d) 
responds to the received H.245 endSessionCommand 
by sending its own H.245 endSessionCommand to GK 
2, which sends the H.245 endSessionCommand on to 
endpoint Client 1 . In a step 455, endpoint Client 1 sends 

30 an H.225.0 Release Complete message to gatekeeper 
GK 2 to close the call signaling channel, and GK 2 
sends the Release Complete message on to endpoint 
Client 2. Endpoint Clients 1 and 2 then inform gate- 
keeper GK 2 to release the control channel for the sec- 

35 ondary call by sending Disengage Request (DRQ) 
messages to GK 2, in a step 457. In a step 458, gate- 
keeper GK 2 responds to the received DRQ messages 
by sending endpoint Clients 1 and 2 Disengage Confirm 
. (DCF) messages. In a step 459, the redundancy super- 

40 visory layer 1 1 1 determines whether the GUId is recog- 
nized as belonging to an already closed connection. If 
so, then the operation of the secondary state machine 
terminates. If in a step 459 it is found that the media 
channel has not been closed, then in a step 460 the 

45 media connection is closed. 

[0033] Turning now to FIG. 4C, a diagram illustrat- 
ing operation of the system when gatekeeper failure is 
determined. In particular, in a step 462, the gatekeeper 
GK 1 fails. It is noted that failure of the gatekeeper GK 1 

so is by way of example only. The present invention is 
equally applicable to a failure of gatekeeper GK 2, if the 
gatekeeper GK 2 were handling the primary call. Next, 
in a step 464, the primary state machine 1 1 0a of the 
endpoint Client 1 detects the failure of the gatekeeper 

55 GK 1 , typically as a closed TCP socket. In response, in 
step 468, the endpoint Client 1 's primary state machine 
1 10a clears its gatekeeper GK 1 signaling. However, the 
secondary state machine 110b maintains its signaling 
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through gatekeeper GK 2. In a step 470, the arbitration 
layer 29 detects that the primary state machine 1 10a is 
down and thus it continues the session by using the 
secondary state machine 110b. In step 472, the state 
machine 110b continues to maintain signaling with the 5 
gatekeeper GK 2. It is noted that a similar series of 
steps occurs at the endpoint Client 2. 
[0034] If, after failure of the primary gatekeeper GK 
1 , other endpoints that are assigned to the gatekeeper 
GK 1 as their primary gatekeeper attempt to set up 10 
calls, they will still first seek to signal via the gatekeeper 
GK 1. However, since they receive no response, they 
will recognize that they are no longer registered with the 
gatekeeper GK 1 , so primary calls will be made through 
the gatekeeper GK 2. 15 
[0035] A further enhancement of the present inven- 
tion is shown in FIG. 5. In particular, FIG. 5 illustrates a 
system similar to that shown in FIG. 3, but includes a 
bandwidth allocation manager (BAM) 1 1 3 including a 
redundant allocation layer 1 1 5 according to the present 20 
invention. Typically, during call setup, the gatekeeper 
handling a call would request a particular amount of 
bandwidth. The bandwidth is then assigned to the call 
and is no longer available to other users. Since the 
redundancy supervisory layers 111a, 1 1 1 b are making 25 
two bandwidth requests for each call, bandwidth will be 
requested for only the first (primary) call. No bandwidth 
wilt be requested for the secondary call as only a media 
channel(s) for one call is actually needed and estab- 
lished. Accordingly, the bandwidth allocation manager 30 
113 and, particularly, the redundant allocation manager 
115 identify duplicate call identification numbers 
(GUIds) and associate the bandwidth of a first (primary) 
call as applying to a secondary call as well. It is noted 
that the principles of this embodiment are equally appli- 35 
cable to other types of servers that rely on counting a 
number of signaling channels before undertaking a par- 
ticular action. For example, a billing server might count 
the number of signaling channels and therefore bill a 
user of the redundancy supervisory layer twice for the 40 
same call. The redundancy allocation layer described 
with reference to FIG. 5 could be used to eliminate the 
duplicate billing. Thus, FIG. 5 is exemplary only. 
[0036] As shown in FIG. 5, a pair of gatekeepers, 
GK 1 and GK 2, a pair of client terminals or endpoints 45 
Client 1 and Client 2, and a bandwidth allocation man- 
ager 1 13 are coupled to a LAN. If Client 1 initiates a call 
to Client 2, it sends an ARQ message to its primary 
gatekeeper GK 1 along signal path 502. The gate- 
keeper GK 1 in turn sends a bandwidth allocation 50 
request to the bandwidth allocation manager 1 13 along 
signal path 512. Assuming the bandwidth is available, 
the bandwidth allocation manager 113 sends a mes- 
sage to the gatekeeper GK 1 informing it that the band- 
width is available along the path 512. 55 
[0037] Gatekeeper GK 1 sends an ACF message to 
the endpoint Client 1 along path 502 indicating the 
bandwidth available for this call. Client 1 sends an 



H. 225.0 Setup message to gatekeeper GK 1 , and gate- 
keeper GK 1 then sends the H. 225.0 Setup message to 
Client 2 along path 504. Client 2 recognizes the new call 
request and the call is set up in the standard fashion 
and media channel(s) 510 is established. After the first 
call reaches the connect state, a new call setup is initi- 
ated by Client 1 sending an ARQ message to gate- 
keeper GK 2 along path 506. Since this is known to be 
a secondary call by Client 1 , the ARQ message con- 
tains a request for zero bandwidth for this call. Gate- 
keeper GK 2 responds with an ACF to Client 1 along 
path 506. Client 1 then sends along path 506 an 
H.225.0 Setup message to gatekeeper GK 2 containing 
the same globally unique call identifier (GUId) as was 
used for the corresponding primary call to Client 2 that 
was set up through gatekeeper GK 1 . The secondary 
gatekeeper GK 2 sends an indication of the secondary 
call with its GUId to the bandwidth allocation manager 
113 along signaling path 514. The bandwidth allocation 
managers redundant allocation layer 115 associates 
this secondary call to an existing call because it recog- 
nizes the GUId that had been provided to it previously. 
The redundant allocation layer 1 1 5 then sends an asso- 
ciation acknowledgement to the gatekeeper GK 2 along 
the signal path 514, but does not actually assign addi- 
tional bandwidth to the call and thus does not reduce 
the amount of bandwidth available for other calls. 
[0038] The gatekeeper GK 2 then sends an H.225.0 
Setup message to the endpoint Client 2 along signaling 
path 508. The H.225.0 Setup message contains the 
same GUId as the first primary call. Alternatively, the 
GUId could be related according to a predetermined 
algorithm, such as sequentially, so long as the endpoint 
Client 2 and the redundant allocation layer 1 1 5 of the 
bandwidth allocation manager 113 can recognize the 
call setup being received as being for a redundant call. 
The endpoint Client 2 recognizes the GUId as identify- 
ing a secondary connection and accepts the new call by 
returning an H.225.0 Connect message to gatekeeper 
GK 2, which in turn sends the H.225.0 Connect mes- 
sage to endpoint Client 1 . However, the endpoint Client 
2 will not establish new media channels for this call with 
endpoint Client 1 . 

[0039] If the gatekeeper GK 1 stays up during the 
entire call, when one of the users disconnects, for 
example at Client 1 , then endpoint Client 1 sends clear- 
ing messages to the gatekeepers GK 1 and GK 2 along 
paths 502, 506. The gatekeeper GK 1 terminates the 
call by sending clearing messages to the endpoint Cli- 
ent 2 and exchanging DRQ/DCF messages with Clients 
1 and 2. GK 1 also informs, along path 512, the band- 
width allocation manager 1 1 3 that it has released the 
bandwidth for the primary call and that the redundant 
allocation layer 1 1 5 can clear the GUId for the primary 
and secondary calls that used that GUId. The signaling 
channels 502, 504 for the primary call are then closed. 
[0040] The endpoint Client 1 then takes the same 
actions with the gatekeeper GK 2 to clear the secondary 
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call and the secondary signaling channels 506, 508 are 
closed. The redundancy supervisory layer 111a, 111b 
in each endpoint Client performs the termination func- 
tion (and any related features) based on the clearing 
messages exchanged with gatekeepers GK 1 and GK 2. 
[0041] If the gatekeeper GK 1 fails during the call, 
the signaling channels 502, 504 between the endpoints 
Client 1 and Client 2 are lost. The failure of the gate- 
keeper GK 1 is recognized at the endpoints and the 
bandwidth allocation manager, for example, as a TCP 
socket closing. As discussed above, according to the 
present invention, the voice channel 510 is maintained 
and the secondary signaling channels 506, 508 through 
the gatekeeper GK 2 are used. The bandwidth alloca- 
tion manager's redundant allocation layer 115 recog- 
nizes the calls being handled by the gatekeeper GK 1 
and which calls have redundant signaling being handled 
by the gatekeeper GK 2. If the gatekeeper GK 1 fails, 
the bandwidth allocation manager 115 frees up the 
bandwidth for the calls signaled through the gatekeeper 
GK 1 that do not have redundant signaling. While the 
gatekeeper GK 1 is out of service, any of the gatekeep- 
ers endpoints that are equipped with the redundancy 
supervisory layers will no longer try to place calls to the 
gatekeeper GK 1 , but will switch to use the gatekeeper 
GK 2 to place new calls. It is noted that more than two 
gatekeepers could be used. Thus, FIG. 5 is exemplary 
only. 

[0042] Operation of this embodiment of the inven- 
tion is illustrated more clearly with reference to the flow- 
charts of FIGS. 6A-6C. In particular, with reference to 
FIG. 6A, in a step 601, the endpoint Client 1 calls 
another endpoint, Client 2. The endpoint Client 1 and, 
particularly, the primary state machine 110a, sends an 
ARQ message (AdmissionRequest) to the gatekeeper 
GK 1. In a step 602, the gatekeeper GK 1 requests 
bandwidth from the bandwidth allocation manager 113. 
Assuming that the bandwidth is available, the bandwidth 
allocation manager 113 assigns the requested band- 
width, in a step 603. A bandwidth allocation acknowl- 
edgement is returned to gatekeeper GK 1 in a step 604. 
The gatekeeper GK 1 responds with an ACF (Admis- 
sionConfirm) message confirming the bandwidth 
requested to the endpoint Client 1's primary state 
machine 110a, in a step 605. The ACF message 
includes a Call Signaling Transport Channel Address of 
the gatekeeper GK 1 . In a step 606, in response to the 
ACF message, the primary state machine 110a sends 
an H225.0 Setup message to the gatekeeper GK 1 , 
including a Globally Unique Call Identifier to identify the 
call. Gatekeeper GK 1 sends an indication of the pri- 
mary call along with its GUId to the redundant allocation 
layer 115 of the bandwidth allocation manager 1 13 in a 
step 608. The redundant allocation layer 1 15 stores the 
GUId, its association to GK 1 , and the bandwidth that is 
associated with the call in a step 610. 
[0043] In a step 614, the gatekeeper GK 1 relays 
the H.225.0 Setup message to the endpoint Client 2's 



primary state machine 11 0c. In response, in a step 616, 
the endpoint Client 2's primary state machine 1 1 0c con- 
ducts an ARQ/ACF exchange with the gatekeeper GK 
1. In a step 618, the endpoint Client 2's primary state 

5 machine 110c sends H.225.0 Alerting and Connect 
messages to the gatekeeper GK 1 . The gatekeeper GK 
1 , in turn provides the Alerting and Connect messages 
to the endpoint Client 1 's primary state machine 1 1 0a in 
a step 620. The Alerting or Connect message includes 

w the H.245 Control Channel Transport Address, which is 
used, in a step 622, to establish the H.245 control chan- 
nel. Next, an H.245 capability exchange is undertaken, 
in a step 623. The capability exchange may include 
exchange of coding algorithms to be used, and the like. 

15 In addition, according to the present invention, the 
capability exchange includes an exchange of whether 
each side is equipped with a redundancy supervisory 
layer 1 1 1 , a determination which is made in a step 625. 
After the capability exchange the media channel(s) for 

20 the call is opened in a step 624. If one side is not 
equipped with a redundancy supervisory layer 111, 
then in a step 626, the system proceeds with normal call 
setup without redundancy, and the non-equipped side 
uses its only state machine as the "primary" state 

25 machine. In step 625, if it is established that both sides 
are equipped with a redundancy supervisory layer, then 
the primary state machine 110a sends a signal activat- 
ing the secondary state machine 1 10b in a step 627. 
[0044] In a step 630, the secondary state machine 

30 1 10b sends an ARQ to the gatekeeper GK2 and since 
this is for a known secondary call, no bandwidth is 
requested. In a step 632, the secondary state machine 
110b receives an ACF message from the gatekeeper 
GK 2, including the Call Signal Transport Channel 

35 Address of the gatekeeper GK 2. In a step 634, the sec- 
ondary state machine 110b sends an H.225.0 Setup 
message to the gatekeeper GK 2, using the same glo- 
bally unique call identifier that the primary state 
machine 1 10a used previously with the gatekeeper GK 

40 1. 

[0045] Gatekeeper GK 2 sends an indication of the 
secondary call and its GUId to the redundant allocation 
layer 115 in a step 636. In a step 638, the redundant 
allocation layer 115 stores the association of gate- 
45 keeper GK 2 with the GUId and with the bandwidth 
already associated for the primary call established 
through gatekeeper GK 1 . 

[0046] In a step 640, the gatekeeper GK 2 sends 
the H.225.0 Setup message to the endpoint Client 2, 

so and particularly, the secondary state machine 110d, 
containing the same globally unique call identifier as the 
primary call established via GK 1. In a step 642, the 
endpoint Client 2's secondary state machine 1 10d and 
the gatekeeper GK 2 undertake the ARQ/ACF 

55 exchange (again, with no bandwidth being requested 
because this is known to be a secondary call). In a step 
644, the endpoint Client 2's secondary state machine 
1 10d sends a Connect message to the gatekeeper GK 
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2. This Connect message is forwarded by the gate- 
keeper GK 2 to the endpoint Client Vs secondary state 
machine 110b in a step 646. Next, in a step 648, the 
secondary state machine 1 1 0b of the endpoint Client 1 
establishes the H.245 control channel with the endpoint 5 
Client 2's secondary state machine 1 10d. The Client 2 
recognizes the duplicate nature of this second call and 
associates the new signaling and control channels with 
the existing media channel(s) without opening new 
media channel(s), in a step 650. 10 
[0047] Turning now to FIG. 6B, a flowchart illustrat- 
ing the termination process is shown. In a step 651 , call 
termination is initiated at endpoint Client 1 . It is noted 
that the call. termination could be initiated from the end- 
point Client 2 as well. In a step 652, the endpoint Client 15 
1 (and, in particular, the state machine 110a), for exam- 
ple, initiates call termination by sending an H.245 end- 
SessionCommand to gatekeeper GK 1, which sends 
the H.245 endSessionCommand on to endpoint Client 
2. In a step 654, endpoint Client 2 (and, in particular, the 20 
state machine 110c) responds to the received H.245 
endSessionCommand by sending its own H.245 end- 
SessionCommand to GK 1 , which sends the H.245 end- 
SessionCommand on to endpoint Client 1. In a step 
656, endpoint Client 1 sends an H.225.0 Release Com- 25 
plete message to gatekeeper GK 1 to close the call sig- 
naling channel, and GK 1 sends the Release Complete 
message on to endpoint Client 2. Endpoint Clients 1 
and 2 then inform gatekeeper GK 1 to release the band- 
width for the primary call by sending Disengage 30 
Request (DRQ) messages to GK 1 , in a step 658. In a 
step 659, gatekeeper GK 1 responds to the received 
DRQ messages by sending endpoint Clients 1 and 2 
Disengage Confirm (DCF) messages. 
[0048] Concurrently with closing the primary con- 35 
nection, the secondary connection also needs to be 
closed. In a step 662, the endpoint Client 1 (and, in par- 
ticular, the state machine 1 10b) initiates call termination 
by sending an H.245 endSessionCommand to gate- 
keeper GK 2, which sends the H.245 endSessionCom- ao 
mand on to endpoint Client 2. In a step 664, endpoint 
Client 2 (and, in particular, the state machine 110d) 
responds to the received H.245 endSessionCommand 
by sending its own H.245 endSessionCommand to GK 
2, which sends the H.245 endSessionCommand on to 45 
endpoint Client 1 . In a step 666, endpoint Client 1 sends 
an H.225.0 Release Complete message to gatekeeper 
GK 2 to close the call signaling channel, and GK 2 
sends the Release Complete message on to endpoint 
Client 2. Endpoint Clients 1 and 2 then inform gate- so 
keeper GK 2 to release the control channel for the sec- 
ondary call by sending Disengage Request (DRQ) 
messages to GK 2, in a step 668. In a step 669, gate- 
keeper GK 2 responds to the received DRQ messages 
by sending endpoint Clients 1 and 2 Disengage Confirm 55 
(DCF) messages. 

[0049] The gatekeepers GK 1 and GK 2 further 
send a signal to the bandwidth allocation manager 1 1 3, 



indicating that the call is being terminated, and releas- 
ing the bandwidth, in a step 670. In a step 672, the 
bandwidth allocation manager 1 1 3 and, particularly, the 
redundant allocation layer 115 checks to see if the 
bandwidth associated with the GUId has already been 
released. If not, then in a step 674, the bandwidth is 
released. Next, in a step 676, the redundancy supervi- 
sory layers 111a and 111b determine whether the GUId 
is recognized as belonging to an already closed con- 
nection. If it is, then no additional action is taken, other 
than to close the signaling. However, if it is not recog- 
nized as associated with an already closed media chan- 
nel, then the media channel is closed, in a step 678, and 
the signaling channel is closed as well. 
[0050] Turning now to FIG. 6C, a diagram illustrat- 
ing operation of the bandwidth allocation manager 1 1 3 
and the associated redundant allocation layer 1 1 5 in the 
event of gatekeeper failure is shown. In particular, in a 
step 680, the gatekeeper GK 1 fails. It is noted that fail- 
ure of the gatekeeper GK 1 is by way of example only. 
The present invention is equally applicable to failure of 
gatekeeper GK 2. Next, in a step 682, the bandwidth 
allocation manager 1 13 detects the failure of the gate- 
keeper GK 1, typically as a closed TCP socket. In 
response, in step 684, the bandwidth allocation man- 
ager 113's redundant allocation layer 115 checks to 
determine whether a secondary call on another gate- 
keeper exists (primary or secondary), for example, by 
identifying calls with the same globally unique call iden- 
tifier assigned to both GK 1 and to another gatekeeper, 
for example, GK 2. If so, then in a step 686, the band- 
width allocation manager 1 13 keeps the reserved band- 
width for the other gatekeeper, but removes GK 1 from 
the stored entry. If not, then in a step 688, the bandwidth 
assigned only to the GK 1 call is released. 

Claims 

1 . An H.323 client terminal, comprising: 

a first H.323 controller configured to handle call 
and control signaling during a media communi- 
cation with another H.323 client terminal via a 
first gatekeeper; 

a second H.323 controller configured to handle 
call and control signaling via a second gate- 
keeper; 

wherein said second H.323 controller 
provides redundant H.323 call and control sig- 
naling for said media connection while said first 
H.323 controller provides call and control sign- 
aling for said media connection via said first 
gatekeeper, and said second H.323 controller 
provides H.323 call and control signaling for 
said media connection via said second gate- 
keeper if said first gatekeeper fails. 

2. An H.323 client terminal, in accordance with claim 
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1, wherein said first H.323 controller and said sec- 
ond H.323 controller are configured to provide the 
same globally unique call identifier (GUId) to said 
first and second gatekeepers. 

5 

3. An H.323 client terminal, in accordance with claim 
1 , wherein said first H.323 controller and said sec- 
ond H.323 controller are configured to provide a 
globally unique call identifier (GUId) to said second 
gatekeeper that is different but can be associated in w 
a known way from a globally unique call identifier 
presented to said first gatekeeper. 

4. A communications client terminal for use in a net- 
work having separate signaling and media chan- 15 
nels, comprising: 

a first controller configured to handle call sign- 
aling during a media communication with 
another client terminal via a first gatekeeper; 20 
a second controller configured to handle call 
signaling with a second gatekeeper; 

wherein said second controller provides 
redundant signaling for said media connection 
while said first controller provides call signaling 25 
for said media connection via said first gate- 
keeper, and said second controller provides 
call signaling for said media connection via 
said second gatekeeper if said first gatekeeper 
fails. 30 

5. A communications client terminal, in accordance 
with claim 4, wherein said first controller and said 
second controller are configured to provide the 
same unique call identifier to said first and second 35 
gatekeeper 

6. A communications client terminal, in accordance 
with claim 4, wherein said first controller and said 
second controller are configured to provide a 40 
unique call identifier to said second gatekeeper that 

is different but can be associated in a know way 
from a unique call identifier presented to said first 
gatekeeper. 

45 

7. A telecommunications system, having separate 
media and signaling channels, comprising: 

a packet-switched network; 
a plurality of client terminals coupled to said 50 
packet switched network; 
a plurality of gatekeepers coupled to said 
packet switched network; 
wherein the plurality of client terminals are con- ' 
figured to establish primary signaling connec- 55 
tions with one another via a first of said plurality 
of gatekeepers, and redundant signaling con- 
nections with one another via a second of said 



plurality of gatekeepers while maintaining a 
single media connection such that if said pri- 
mary gatekeeper fails, said media connection 
is maintained with said redundant signaling 
connection. 

8. A telecommunications system according to claim 7, 
further comprising: 

a bandwidth allocation manager coupled to 
said packet-switched network, said bandwidth 
configured to receive bandwidth allocation 
requests from said first and second gatekeep- 
ers, and allocate bandwidth for said media con- 
nection in response to a request from said first 
gatekeeper and to associate a second call from 
said second gatekeeper with this same band- 
width that was allocated to the first gatekeeper 
call. 

9. A telecommunications system according to claim 8, 
said bandwidth allocation manager configured to 
release said bandwidth only once in response to a 
closure of both said primary and said redundant 
signaling. 

10. A telecommunications system according to claim 7, 
further comprising: 

a server coupled to said packet-switched net- 
work, said server configured to receive function 
requests from said first and second gatekeep- 
ers based on a number of signaling channels, 
and perform said function based on establish- 
ment of said media connection in response to a 
request from said first gatekeeper but not said 
second gatekeeper. 

1 1 . A telecommunications system according to claim 7, 
wherein a predetermined number less than a total 
number of said plurality of said client terminals are 
equipped to establish said primary and redundant 
signaling connections. 

12. A telecommunications system according to claim 7, 
wherein said first of said plurality of gatekeepers 
operates under a first operating system and said 
second of said plurality of gatekeepers operates 
under a second operating system. 
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